3.6.0
- Updated to Microsoft.IdentityModel.* 8.3.1
- Updated to MSAL.NET 4.67.2
Bug fixes
- Checks that B2C tokens don't contain the claims used by Identity Web to represent the home tenant and object ID (obtained from the UserInfo endpoint). See #3131
- Remove explicit locking in
OpenIdConnectCachingSecurityTokenProvider
. See Issue #3078
Fundamentals
- Fix Null Reference Exception in OwinTokenAcquirerFactory + other OWIN cleanup. See #3183
- Re-add code coverage comments & scope to src files. See #3177
What's Changed
- Update changelog.md by @jmprieur in #3161
- Update global.json by @keegan-caruso in #3163
- Use ExtraQP to inject telemetry SDK ID by @bgavrilMS in #2973
- Fix 3167 (package downgrade when referencing IdentityModel.Tokens from dev) by @jmprieur in #3168
- Add Warning Quality Check Build Task 🔨 by @kllysng in #3169
- Treat warnings as errors by @keegan-caruso in #3166
- Revert: Warning Quality Check Build Task by @alexholub113 in #3172
- fix warnings in idweb and readd warnings as errors by @jennyf19 in #3173
- Add checks to protect the internal claims used by MIW. Ref: issue #2968 by @DOMZE in #3131
- use only src files and re-add comments by @jennyf19 in #3176
- Update dotnet actions by @sebastienros in #3175
- Add retry logic to stabilize flaky UI tests by @kllysng in #3180
- Add null handling for process output/error data in UiTestHelpers by @kllysng in #3184
- package updates from dependabot by @jennyf19 in #3185
- Fix E2E tests persistent flakiness + build hanging by @kllysng in #3188
- Revert WaitForProcess in UI Tests by @jmprieur in #3189
- Update to use MSAL 4.67.1 by @gladjohn in #3193
- Update to use MSAL 4.67.2 by @gladjohn in #3200
- Remove explicit locking in OpenIdConnectCachingSecurityTokenProvider by @keegan-caruso in #3202
- 3.6.0 changelog by @kllysng in #3203
New Contributors
- @DOMZE made their first contribution in #3131
- @sebastienros made their first contribution in #3175
- @gladjohn made their first contribution in #3193
Full Changelog: 3.5.0...3.6.0